Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: um1ZL6S8TY/MlHv1qACDDKGdOEQ4CJMv8JB/+DBQFdI=
Subject key identifier: AA:5F:F4:26:9C:23:1A:CC:EF:3E:81:5D:E4:C0:EC:47:01:96:27:B4
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 01901E8F74214AEBC1CAC754066480EB136F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 0DA8
Signing time: Sun 16 Jun 2024 01:00:36 +0000
Manifest this update: Sun 16 Jun 2024 01:00:36 +0000
Manifest next update: Mon 17 Jun 2024 01:00:36 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: N93QWIuI2Dr5xnKKFAGoMHByPekMDu9dwATLID5pfWo=)
2: iBU5SHfJ9vMCGd-rfp6b8rXDUw0.roa (hash: ojQFqlxIxie+R/s5Rst0cDmL1srooPZj0wWBtNU/cow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:8f:74:21:4a:eb:c1:ca:c7:54:06:64:80:eb:13:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Jun 16 01:00:36 2024 GMT
Not After : Jun 17 01:00:36 2024 GMT
Subject: CN=aa5ff4269c231accef3e815de4c0ec47019627b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:62:b0:48:aa:21:f0:48:32:c9:b2:75:0f:5b:
3f:cb:25:10:dd:7e:40:11:de:9e:0e:99:3f:b5:63:
b1:c0:7d:8d:e9:d4:10:06:7d:11:dc:1c:07:60:6d:
12:18:50:82:71:70:10:2b:ee:5e:5d:99:9e:38:a1:
b0:79:03:f1:d3:c5:c8:cc:e6:66:67:f4:5f:5b:96:
ad:09:91:3c:b6:fb:1e:6b:cd:12:60:e0:b0:12:87:
60:1f:8a:d5:b9:53:ed:1d:fd:1a:90:d7:73:69:66:
2c:45:14:43:4c:25:33:4a:a6:6b:53:75:30:e0:9e:
8d:70:53:5b:a2:b0:99:ed:8a:bd:85:b2:cb:61:a5:
63:8d:b8:1e:e7:fd:c0:fb:93:84:2e:09:aa:0a:3e:
80:fd:ae:5a:7c:7a:05:66:5a:3f:0d:2f:b7:b1:20:
85:69:17:e2:94:3a:1e:66:b7:7d:06:6f:ce:92:41:
2a:49:f4:81:ae:28:36:96:c5:57:02:07:f3:aa:ed:
d7:e8:5f:e1:bf:08:52:03:04:57:08:38:45:cb:c3:
f2:14:7c:fd:4c:18:b6:d5:e1:7d:97:7c:e0:e4:c4:
8b:b4:b1:06:24:56:96:95:2d:69:d1:cc:0f:c8:13:
80:19:a5:0f:88:01:b3:b5:49:de:c9:c3:42:85:7b:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5F:F4:26:9C:23:1A:CC:EF:3E:81:5D:E4:C0:EC:47:01:96:27:B4
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1b:8b:ec:1b:ba:b5:b6:60:73:8a:50:c9:be:0a:6f:dc:52:
f2:3c:0b:c5:54:32:2b:ad:a0:4c:de:c6:4d:88:07:b1:5a:70:
84:6f:b0:f6:41:26:f0:68:73:9c:ff:44:56:26:98:3a:74:af:
75:20:46:09:60:92:9f:45:cb:1e:dc:5c:26:e7:48:d0:e0:a3:
d0:a3:d7:da:97:72:dc:93:80:c0:72:59:6a:f0:e4:5a:76:4e:
73:7d:68:f9:1d:8e:e9:68:61:c4:de:19:95:98:73:ef:52:97:
3a:c1:11:dc:55:97:e0:47:fd:c6:e6:72:d0:fa:ca:e9:31:ed:
0e:b6:02:17:45:3f:68:85:ed:9d:b9:64:21:80:5e:50:94:a7:
49:0e:d1:7c:89:3a:2f:cb:47:d2:52:e9:0d:ce:7c:54:d3:1d:
8e:9a:3a:a6:a4:7e:ad:28:32:9a:41:8f:73:3b:cd:35:5b:5c:
e9:e0:c1:14:78:78:66:fc:04:db:b2:15:ef:e6:0c:d2:80:f8:
12:cf:e3:28:9e:9a:f2:db:a5:5d:c4:44:76:86:ae:98:48:a7:
ea:c9:72:31:3f:e1:ec:89:6f:a9:80:ba:16:7e:d9:01:b8:9e:
6e:8e:5d:f1:24:e4:1a:54:b0:28:fb:41:2f:b4:c1:84:e9:32:
9c:82:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:00:10 2024 by rpki-client on console-fra.rpki-client.org